it's probably not a bad idea to have some pretty basic input validation on things.... although we could allow the guest account to go nuts... hmmm